CVE-2025-64544

Adobe Experience Manager (AEM) 6.5.23 and earlier is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2025-64544) that could allow a low-privileged attacker to cause malicious scripts to run in the victim’s browser. Exploitation requires user interaction (e.g., visiting a cra...

CVE-2025-64544 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...